1 /* 2 * CDDL HEADER START 3 * 4 * The contents of this file are subject to the terms of the 5 * Common Development and Distribution License (the "License"). 6 * You may not use this file except in compliance with the License. 7 * 8 * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE 9 * or http://www.opensolaris.org/os/licensing. 10 * See the License for the specific language governing permissions 11 * and limitations under the License. 12 * 13 * When distributing Covered Code, include this CDDL HEADER in each 14 * file and include the License file at usr/src/OPENSOLARIS.LICENSE. 15 * If applicable, add the following below this CDDL HEADER, with the 16 * fields enclosed by brackets "[]" replaced with your own identifying 17 * information: Portions Copyright [yyyy] [name of copyright owner] 18 * 19 * CDDL HEADER END 20 */ 21 22 /* 23 * Copyright (c) 1990, 1991 UNIX System Laboratories, Inc. 24 * Copyright (c) 1988 AT&T 25 * All Rights Reserved 26 * 27 * Copyright 2006 Sun Microsystems, Inc. All rights reserved. 28 * Use is subject to license terms. 29 */ 30 #pragma ident "%Z%%M% %I% %E% SMI" 31 32 #include <string.h> 33 #include <stdio.h> 34 #include <sys/elf_386.h> 35 #include <debug.h> 36 #include <reloc.h> 37 #include "msg.h" 38 #include "_libld.h" 39 40 Word 41 ld_init_rel(Rel_desc *reld, void *reloc) 42 { 43 Rel * rel = (Rel *)reloc; 44 45 /* LINTED */ 46 reld->rel_rtype = (Word)ELF_R_TYPE(rel->r_info); 47 reld->rel_roffset = rel->r_offset; 48 reld->rel_raddend = 0; 49 reld->rel_typedata = 0; 50 51 return ((Word)ELF_R_SYM(rel->r_info)); 52 } 53 54 void 55 ld_mach_eflags(Ehdr *ehdr, Ofl_desc *ofl) 56 { 57 ofl->ofl_dehdr->e_flags |= ehdr->e_flags; 58 } 59 60 void 61 ld_mach_make_dynamic(Ofl_desc *ofl, size_t *cnt) 62 { 63 if (!(ofl->ofl_flags & FLG_OF_RELOBJ)) { 64 /* 65 * Create this entry if we are going to create a PLT table. 66 */ 67 if (ofl->ofl_pltcnt) 68 (*cnt)++; /* DT_PLTGOT */ 69 } 70 } 71 72 void 73 ld_mach_update_odynamic(Ofl_desc *ofl, Dyn **dyn) 74 { 75 if (((ofl->ofl_flags & FLG_OF_RELOBJ) == 0) && ofl->ofl_pltcnt) { 76 (*dyn)->d_tag = DT_PLTGOT; 77 if (ofl->ofl_osgot) 78 (*dyn)->d_un.d_ptr = ofl->ofl_osgot->os_shdr->sh_addr; 79 else 80 (*dyn)->d_un.d_ptr = 0; 81 (*dyn)++; 82 } 83 } 84 85 Xword 86 ld_calc_plt_addr(Sym_desc *sdp, Ofl_desc *ofl) 87 { 88 Xword value; 89 90 value = (Xword)(ofl->ofl_osplt->os_shdr->sh_addr) + 91 M_PLT_RESERVSZ + ((sdp->sd_aux->sa_PLTndx - 1) * M_PLT_ENTSIZE); 92 return (value); 93 } 94 95 /* 96 * Build a single plt entry - code is: 97 * if (building a.out) 98 * JMP *got_off 99 * else 100 * JMP *got_off@GOT(%ebx) 101 * PUSHL &rel_off 102 * JMP -n(%pc) # -n is pcrel offset to first plt entry 103 * 104 * The got_off@GOT entry gets filled with the address of the PUSHL, 105 * so the first pass through the plt jumps back here, jumping 106 * in turn to the first plt entry, which jumps to the dynamic 107 * linker. The dynamic linker then patches the GOT, rerouting 108 * future plt calls to the proper destination. 109 */ 110 static void 111 plt_entry(Ofl_desc * ofl, Word rel_off, Sym_desc * sdp) 112 { 113 uchar_t *pltent, *gotent; 114 Sword plt_off; 115 Word got_off; 116 117 got_off = sdp->sd_aux->sa_PLTGOTndx * M_GOT_ENTSIZE; 118 plt_off = M_PLT_RESERVSZ + ((sdp->sd_aux->sa_PLTndx - 1) * 119 M_PLT_ENTSIZE); 120 pltent = (uchar_t *)(ofl->ofl_osplt->os_outdata->d_buf) + plt_off; 121 gotent = (uchar_t *)(ofl->ofl_osgot->os_outdata->d_buf) + got_off; 122 123 /* 124 * Fill in the got entry with the address of the next instruction. 125 */ 126 /* LINTED */ 127 *(Word *)gotent = ofl->ofl_osplt->os_shdr->sh_addr + plt_off + 128 M_PLT_INSSIZE; 129 130 if (!(ofl->ofl_flags & FLG_OF_SHAROBJ)) { 131 pltent[0] = M_SPECIAL_INST; 132 pltent[1] = M_JMP_DISP_IND; 133 pltent += 2; 134 /* LINTED */ 135 *(Word *)pltent = (Word)(ofl->ofl_osgot->os_shdr->sh_addr + 136 got_off); 137 } else { 138 pltent[0] = M_SPECIAL_INST; 139 pltent[1] = M_JMP_REG_DISP_IND; 140 pltent += 2; 141 /* LINTED */ 142 *(Word *)pltent = (Word)got_off; 143 } 144 pltent += 4; 145 146 pltent[0] = M_INST_PUSHL; 147 pltent++; 148 /* LINTED */ 149 *(Word *)pltent = (Word)rel_off; 150 pltent += 4; 151 152 plt_off = -(plt_off + 16); /* JMP, PUSHL, JMP take 16 bytes */ 153 pltent[0] = M_INST_JMP; 154 pltent++; 155 /* LINTED */ 156 *(Word *)pltent = (Word)plt_off; 157 } 158 159 uintptr_t 160 ld_perform_outreloc(Rel_desc * orsp, Ofl_desc * ofl) 161 { 162 Os_desc * relosp, * osp = 0; 163 Word ndx, roffset, value; 164 Rel rea; 165 char *relbits; 166 Sym_desc * sdp, * psym = (Sym_desc *)0; 167 int sectmoved = 0; 168 169 sdp = orsp->rel_sym; 170 171 /* 172 * If the section this relocation is against has been discarded 173 * (-zignore), then also discard (skip) the relocation itself. 174 */ 175 if (orsp->rel_isdesc && ((orsp->rel_flags & 176 (FLG_REL_GOT | FLG_REL_BSS | FLG_REL_PLT | FLG_REL_NOINFO)) == 0) && 177 (orsp->rel_isdesc->is_flags & FLG_IS_DISCARD)) { 178 DBG_CALL(Dbg_reloc_discard(ofl->ofl_lml, M_MACH, orsp)); 179 return (1); 180 } 181 182 /* 183 * If this is a relocation against a move table, or expanded move 184 * table, adjust the relocation entries. 185 */ 186 if (orsp->rel_move) 187 ld_adj_movereloc(ofl, orsp); 188 189 /* 190 * If this is a relocation against a section using a partial initialized 191 * symbol, adjust the embedded symbol info. 192 * 193 * The second argument of the am_I_partial() is the value stored at the 194 * target address relocation is going to be applied. 195 */ 196 if (ELF_ST_TYPE(sdp->sd_sym->st_info) == STT_SECTION) { 197 if (ofl->ofl_parsym.head && 198 (sdp->sd_isc->is_flags & FLG_IS_RELUPD) && 199 /* LINTED */ 200 (psym = ld_am_I_partial(orsp, *(Xword *) 201 ((uchar_t *)(orsp->rel_isdesc->is_indata->d_buf) + 202 orsp->rel_roffset)))) { 203 DBG_CALL(Dbg_move_outsctadj(ofl->ofl_lml, psym)); 204 sectmoved = 1; 205 } 206 } 207 208 value = sdp->sd_sym->st_value; 209 210 if (orsp->rel_flags & FLG_REL_GOT) { 211 osp = ofl->ofl_osgot; 212 roffset = (Word)ld_calc_got_offset(orsp, ofl); 213 214 } else if (orsp->rel_flags & FLG_REL_PLT) { 215 /* 216 * Note that relocations for PLT's actually 217 * cause a relocation againt the GOT. 218 */ 219 osp = ofl->ofl_osplt; 220 roffset = (Word) (ofl->ofl_osgot->os_shdr->sh_addr) + 221 sdp->sd_aux->sa_PLTGOTndx * M_GOT_ENTSIZE; 222 223 plt_entry(ofl, osp->os_relosdesc->os_szoutrels, sdp); 224 225 } else if (orsp->rel_flags & FLG_REL_BSS) { 226 /* 227 * This must be a R_386_COPY. For these set the roffset to 228 * point to the new symbols location. 229 */ 230 osp = ofl->ofl_isbss->is_osdesc; 231 roffset = (Word)value; 232 } else { 233 osp = orsp->rel_osdesc; 234 235 /* 236 * Calculate virtual offset of reference point; equals offset 237 * into section + vaddr of section for loadable sections, or 238 * offset plus section displacement for nonloadable sections. 239 */ 240 roffset = orsp->rel_roffset + 241 (Off)_elf_getxoff(orsp->rel_isdesc->is_indata); 242 if (!(ofl->ofl_flags & FLG_OF_RELOBJ)) 243 roffset += orsp->rel_isdesc->is_osdesc-> 244 os_shdr->sh_addr; 245 } 246 247 if ((osp == 0) || ((relosp = osp->os_relosdesc) == 0)) 248 relosp = ofl->ofl_osrel; 249 250 /* 251 * Assign the symbols index for the output relocation. If the 252 * relocation refers to a SECTION symbol then it's index is based upon 253 * the output sections symbols index. Otherwise the index can be 254 * derived from the symbols index itself. 255 */ 256 if (orsp->rel_rtype == R_386_RELATIVE) 257 ndx = STN_UNDEF; 258 else if ((orsp->rel_flags & FLG_REL_SCNNDX) || 259 (ELF_ST_TYPE(sdp->sd_sym->st_info) == STT_SECTION)) { 260 if (sectmoved == 0) { 261 /* 262 * Check for a null input section. This can 263 * occur if this relocation references a symbol 264 * generated by sym_add_sym(). 265 */ 266 if ((sdp->sd_isc != 0) && 267 (sdp->sd_isc->is_osdesc != 0)) 268 ndx = sdp->sd_isc->is_osdesc->os_scnsymndx; 269 else 270 ndx = sdp->sd_shndx; 271 } else 272 ndx = ofl->ofl_sunwdata1ndx; 273 } else 274 ndx = sdp->sd_symndx; 275 276 relbits = (char *)relosp->os_outdata->d_buf; 277 278 rea.r_info = ELF_R_INFO(ndx, orsp->rel_rtype); 279 rea.r_offset = roffset; 280 DBG_CALL(Dbg_reloc_out(ofl, ELF_DBG_LD, SHT_REL, &rea, relosp->os_name, 281 orsp->rel_sname)); 282 283 /* 284 * Assert we haven't walked off the end of our relocation table. 285 */ 286 assert(relosp->os_szoutrels <= relosp->os_shdr->sh_size); 287 288 (void) memcpy((relbits + relosp->os_szoutrels), 289 (char *)&rea, sizeof (Rel)); 290 relosp->os_szoutrels += sizeof (Rel); 291 292 /* 293 * Determine if this relocation is against a non-writable, allocatable 294 * section. If so we may need to provide a text relocation diagnostic. 295 * Note that relocations against the .plt (R_386_JMP_SLOT) actually 296 * result in modifications to the .got. 297 */ 298 if (orsp->rel_rtype == R_386_JMP_SLOT) 299 osp = ofl->ofl_osgot; 300 301 ld_reloc_remain_entry(orsp, osp, ofl); 302 return (1); 303 } 304 305 /* 306 * i386 Instructions for TLS processing 307 */ 308 static uchar_t tlsinstr_gd_ie[] = { 309 /* 310 * 0x00 movl %gs:0x0, %eax 311 */ 312 0x65, 0xa1, 0x00, 0x00, 0x00, 0x00, 313 /* 314 * 0x06 addl x(%eax), %eax 315 * 0x0c ... 316 */ 317 0x03, 0x80, 0x00, 0x00, 0x00, 0x00 318 }; 319 320 static uchar_t tlsinstr_gd_le[] = { 321 /* 322 * 0x00 movl %gs:0x0, %eax 323 */ 324 0x65, 0xa1, 0x00, 0x00, 0x00, 0x00, 325 /* 326 * 0x06 addl $0x0, %eax 327 */ 328 0x05, 0x00, 0x00, 0x00, 0x00, 329 /* 330 * 0x0b nop 331 * 0x0c 332 */ 333 0x90 334 }; 335 336 static uchar_t tlsinstr_gd_ie_movgs[] = { 337 /* 338 * movl %gs:0x0,%eax 339 */ 340 0x65, 0xa1, 0x00, 0x00, 0x00, 00 341 }; 342 343 #define TLS_GD_IE_MOV 0x8b /* movl opcode */ 344 #define TLS_GD_IE_POP 0x58 /* popl + reg */ 345 346 #define TLS_GD_LE_MOVL 0xb8 /* movl + reg */ 347 348 #define TLS_NOP 0x90 /* NOP instruction */ 349 350 #define MODRM_MSK_MOD 0xc0 351 #define MODRM_MSK_RO 0x38 352 #define MODRM_MSK_RM 0x07 353 354 #define SIB_MSK_SS 0xc0 355 #define SIB_MSK_IND 0x38 356 #define SIB_MSK_BS 0x07 357 358 static Fixupret 359 tls_fixups(Ofl_desc *ofl, Rel_desc *arsp) 360 { 361 Sym_desc *sdp = arsp->rel_sym; 362 Word rtype = arsp->rel_rtype; 363 uchar_t *offset, r1, r2; 364 365 offset = (uchar_t *)((uintptr_t)arsp->rel_roffset + 366 (uintptr_t)_elf_getxoff(arsp->rel_isdesc->is_indata) + 367 (uintptr_t)arsp->rel_osdesc->os_outdata->d_buf); 368 369 if (sdp->sd_ref == REF_DYN_NEED) { 370 /* 371 * IE reference model 372 */ 373 switch (rtype) { 374 case R_386_TLS_GD: 375 /* 376 * Transition: 377 * 0x0 leal x@tlsgd(,r1,1), %eax 378 * 0x7 call ___tls_get_addr 379 * 0xc 380 * To: 381 * 0x0 movl %gs:0, %eax 382 * 0x6 addl x@gotntpoff(r1), %eax 383 */ 384 DBG_CALL(Dbg_reloc_transition(ofl->ofl_lml, M_MACH, 385 rtype, R_386_TLS_GOTIE, arsp->rel_roffset, 386 sdp->sd_name)); 387 arsp->rel_rtype = R_386_TLS_GOTIE; 388 arsp->rel_roffset += 5; 389 390 /* 391 * Addjust 'offset' to beginning of instruction 392 * sequence. 393 */ 394 offset -= 3; 395 r1 = (offset[2] & SIB_MSK_IND) >> 3; 396 (void) memcpy(offset, tlsinstr_gd_ie, 397 sizeof (tlsinstr_gd_ie)); 398 399 /* 400 * set register %r1 into the addl 401 * instruction. 402 */ 403 offset[0x7] |= r1; 404 return (FIX_RELOC); 405 406 case R_386_TLS_GD_PLT: 407 /* 408 * Fixup done via the TLS_GD relocation 409 */ 410 DBG_CALL(Dbg_reloc_transition(ofl->ofl_lml, M_MACH, 411 rtype, R_386_NONE, arsp->rel_roffset, 412 sdp->sd_name)); 413 return (FIX_DONE); 414 } 415 } 416 417 /* 418 * LE reference model 419 */ 420 switch (rtype) { 421 case R_386_TLS_GD: 422 /* 423 * Transition: 424 * 0x0 leal x@tlsgd(,r1,1), %eax 425 * 0x7 call ___tls_get_addr 426 * 0xc 427 * To: 428 * 0x0 movl %gs:0, %eax 429 * 0x6 addl $x@ntpoff, %eax 430 * 0xb nop 431 * 0xc 432 */ 433 DBG_CALL(Dbg_reloc_transition(ofl->ofl_lml, M_MACH, 434 rtype, R_386_TLS_LE, arsp->rel_roffset, sdp->sd_name)); 435 436 arsp->rel_rtype = R_386_TLS_LE; 437 arsp->rel_roffset += 4; 438 439 /* 440 * Addjust 'offset' to beginning of instruction 441 * sequence. 442 */ 443 offset -= 3; 444 (void) memcpy(offset, tlsinstr_gd_le, 445 sizeof (tlsinstr_gd_le)); 446 return (FIX_RELOC); 447 448 case R_386_TLS_GD_PLT: 449 case R_386_PLT32: 450 /* 451 * Fixup done via the TLS_GD relocation 452 */ 453 DBG_CALL(Dbg_reloc_transition(ofl->ofl_lml, M_MACH, 454 rtype, R_386_NONE, arsp->rel_roffset, sdp->sd_name)); 455 return (FIX_DONE); 456 457 case R_386_TLS_LDM_PLT: 458 DBG_CALL(Dbg_reloc_transition(ofl->ofl_lml, M_MACH, 459 rtype, R_386_NONE, arsp->rel_roffset, sdp->sd_name)); 460 461 /* 462 * Transition: 463 * call __tls_get_addr() 464 * to: 465 * nop 466 * nop 467 * nop 468 * nop 469 * nop 470 */ 471 *(offset - 1) = TLS_NOP; 472 *(offset) = TLS_NOP; 473 *(offset + 1) = TLS_NOP; 474 *(offset + 2) = TLS_NOP; 475 *(offset + 3) = TLS_NOP; 476 return (FIX_DONE); 477 478 case R_386_TLS_LDM: 479 DBG_CALL(Dbg_reloc_transition(ofl->ofl_lml, M_MACH, 480 rtype, R_386_NONE, arsp->rel_roffset, sdp->sd_name)); 481 482 /* 483 * Transition: 484 * 485 * 0x00 leal x1@tlsldm(%ebx), %eax 486 * 0x06 call ___tls_get_addr 487 * 488 * to: 489 * 490 * 0x00 movl %gs:0, %eax 491 */ 492 (void) memcpy(offset - 2, tlsinstr_gd_ie_movgs, 493 sizeof (tlsinstr_gd_ie_movgs)); 494 return (FIX_DONE); 495 496 case R_386_TLS_LDO_32: 497 /* 498 * Instructions: 499 * 500 * 0x10 leal x1@dtpoff(%eax), %edx R_386_TLS_LDO_32 501 * to 502 * 0x10 leal x1@ntpoff(%eax), %edx R_386_TLS_LE 503 * 504 */ 505 offset -= 2; 506 507 DBG_CALL(Dbg_reloc_transition(ofl->ofl_lml, M_MACH, 508 rtype, R_386_TLS_LE, arsp->rel_roffset, sdp->sd_name)); 509 arsp->rel_rtype = R_386_TLS_LE; 510 return (FIX_RELOC); 511 512 case R_386_TLS_GOTIE: 513 /* 514 * These transitions are a little different than the 515 * others, in that we could have multiple instructions 516 * pointed to by a single relocation. Depending upon the 517 * instruction, we perform a different code transition. 518 * 519 * Here's the known transitions: 520 * 521 * 1) movl foo@gotntpoff(%reg1), %reg2 522 * 0x8b, 0x80 | (reg2 << 3) | reg1, foo@gotntpoff 523 * 524 * 2) addl foo@gotntpoff(%reg1), %reg2 525 * 0x03, 0x80 | (reg2 << 3) | reg1, foo@gotntpoff 526 * 527 * Transitions IE -> LE 528 * 529 * 1) movl $foo@ntpoff, %reg2 530 * 0xc7, 0xc0 | reg2, foo@ntpoff 531 * 532 * 2) addl $foo@ntpoff, %reg2 533 * 0x81, 0xc0 | reg2, foo@ntpoff 534 * 535 * Note: reg1 != 4 (%esp) 536 */ 537 DBG_CALL(Dbg_reloc_transition(ofl->ofl_lml, M_MACH, 538 rtype, R_386_TLS_LE, arsp->rel_roffset, sdp->sd_name)); 539 arsp->rel_rtype = R_386_TLS_LE; 540 541 offset -= 2; 542 r2 = (offset[1] & MODRM_MSK_RO) >> 3; 543 if (offset[0] == 0x8b) { 544 /* case 1 above */ 545 offset[0] = 0xc7; /* movl */ 546 offset[1] = 0xc0 | r2; 547 return (FIX_RELOC); 548 } 549 550 if (offset[0] == 0x03) { 551 /* case 2 above */ 552 assert(offset[0] == 0x03); 553 offset[0] = 0x81; /* addl */ 554 offset[1] = 0xc0 | r2; 555 return (FIX_RELOC); 556 } 557 558 /* 559 * Unexpected instruction sequence - fatal error. 560 */ 561 eprintf(ofl->ofl_lml, ERR_FATAL, MSG_INTL(MSG_REL_BADTLSINS), 562 conv_reloc_386_type(arsp->rel_rtype, 0), 563 arsp->rel_isdesc->is_file->ifl_name, 564 demangle(arsp->rel_sname), arsp->rel_isdesc->is_name, 565 EC_OFF(arsp->rel_roffset)); 566 return (FIX_ERROR); 567 568 case R_386_TLS_IE: 569 /* 570 * These transitions are a little different than the 571 * others, in that we could have multiple instructions 572 * pointed to by a single relocation. Depending upon the 573 * instruction, we perform a different code transition. 574 * 575 * Here's the known transitions: 576 * 1) movl foo@indntpoff, %eax 577 * 0xa1, foo@indntpoff 578 * 579 * 2) movl foo@indntpoff, %eax 580 * 0x8b, 0x05 | (reg << 3), foo@gotntpoff 581 * 582 * 3) addl foo@indntpoff, %eax 583 * 0x03, 0x05 | (reg << 3), foo@gotntpoff 584 * 585 * Transitions IE -> LE 586 * 587 * 1) movl $foo@ntpoff, %eax 588 * 0xb8, foo@ntpoff 589 * 590 * 2) movl $foo@ntpoff, %reg 591 * 0xc7, 0xc0 | reg, foo@ntpoff 592 * 593 * 3) addl $foo@ntpoff, %reg 594 * 0x81, 0xc0 | reg, foo@ntpoff 595 */ 596 arsp->rel_rtype = R_386_TLS_LE; 597 offset--; 598 if (offset[0] == 0xa1) { 599 /* case 1 above */ 600 offset[0] = 0xb8; /* movl */ 601 return (FIX_RELOC); 602 } 603 604 offset--; 605 if (offset[0] == 0x8b) { 606 /* case 2 above */ 607 r2 = (offset[1] & MODRM_MSK_RO) >> 3; 608 offset[0] = 0xc7; /* movl */ 609 offset[1] = 0xc0 | r2; 610 return (FIX_RELOC); 611 } 612 if (offset[0] == 0x03) { 613 /* case 3 above */ 614 r2 = (offset[1] & MODRM_MSK_RO) >> 3; 615 offset[0] = 0x81; /* addl */ 616 offset[1] = 0xc0 | r2; 617 return (FIX_RELOC); 618 } 619 /* 620 * Unexpected instruction sequence - fatal error. 621 */ 622 eprintf(ofl->ofl_lml, ERR_FATAL, MSG_INTL(MSG_REL_BADTLSINS), 623 conv_reloc_386_type(arsp->rel_rtype, 0), 624 arsp->rel_isdesc->is_file->ifl_name, 625 demangle(arsp->rel_sname), arsp->rel_isdesc->is_name, 626 EC_OFF(arsp->rel_roffset)); 627 return (FIX_ERROR); 628 } 629 return (FIX_RELOC); 630 } 631 632 uintptr_t 633 ld_do_activerelocs(Ofl_desc *ofl) 634 { 635 Rel_desc *arsp; 636 Rel_cache *rcp; 637 Listnode *lnp; 638 uintptr_t return_code = 1; 639 Word flags = ofl->ofl_flags; 640 Word dtflags1 = ofl->ofl_dtflags_1; 641 642 if (ofl->ofl_actrels.head) 643 DBG_CALL(Dbg_reloc_doact_title(ofl->ofl_lml)); 644 645 /* 646 * Process active relocations. 647 */ 648 for (LIST_TRAVERSE(&ofl->ofl_actrels, lnp, rcp)) { 649 /* LINTED */ 650 for (arsp = (Rel_desc *)(rcp + 1); 651 arsp < rcp->rc_free; arsp++) { 652 uchar_t *addr; 653 Xword value; 654 Sym_desc *sdp; 655 const char *ifl_name; 656 Xword refaddr; 657 int moved = 0; 658 Gotref gref; 659 660 /* 661 * If the section this relocation is against has been 662 * discarded (-zignore), then discard (skip) the 663 * relocation itself. 664 */ 665 if ((arsp->rel_isdesc->is_flags & FLG_IS_DISCARD) && 666 ((arsp->rel_flags & 667 (FLG_REL_GOT | FLG_REL_BSS | 668 FLG_REL_PLT | FLG_REL_NOINFO)) == 0)) { 669 DBG_CALL(Dbg_reloc_discard(ofl->ofl_lml, 670 M_MACH, arsp)); 671 continue; 672 } 673 674 /* 675 * We deteremine what the 'got reference' 676 * model (if required) is at this point. This 677 * needs to be done before tls_fixup() since 678 * it may 'transition' our instructions. 679 * 680 * The got table entries have already been assigned, 681 * and we bind to those initial entries. 682 */ 683 if (arsp->rel_flags & FLG_REL_DTLS) 684 gref = GOT_REF_TLSGD; 685 else if (arsp->rel_flags & FLG_REL_MTLS) 686 gref = GOT_REF_TLSLD; 687 else if (arsp->rel_flags & FLG_REL_STLS) 688 gref = GOT_REF_TLSIE; 689 else 690 gref = GOT_REF_GENERIC; 691 692 /* 693 * Perform any required TLS fixups. 694 */ 695 if (arsp->rel_flags & FLG_REL_TLSFIX) { 696 Fixupret ret; 697 698 if ((ret = tls_fixups(ofl, arsp)) == FIX_ERROR) 699 return (S_ERROR); 700 if (ret == FIX_DONE) 701 continue; 702 } 703 704 /* 705 * If this is a relocation against a move table, or 706 * expanded move table, adjust the relocation entries. 707 */ 708 if (arsp->rel_move) 709 ld_adj_movereloc(ofl, arsp); 710 711 sdp = arsp->rel_sym; 712 refaddr = arsp->rel_roffset + 713 (Off)_elf_getxoff(arsp->rel_isdesc->is_indata); 714 715 if (arsp->rel_flags & FLG_REL_CLVAL) 716 value = 0; 717 else if (ELF_ST_TYPE(sdp->sd_sym->st_info) == 718 STT_SECTION) { 719 Sym_desc *sym; 720 721 /* 722 * The value for a symbol pointing to a SECTION 723 * is based off of that sections position. 724 * 725 * The second argument of the ld_am_I_partial() 726 * is the value stored at the target address 727 * relocation is going to be applied. 728 */ 729 if ((sdp->sd_isc->is_flags & FLG_IS_RELUPD) && 730 /* LINTED */ 731 (sym = ld_am_I_partial(arsp, *(Xword *) 732 ((uchar_t *) 733 arsp->rel_isdesc->is_indata->d_buf + 734 arsp->rel_roffset)))) { 735 /* 736 * If the symbol is moved, 737 * adjust the value 738 */ 739 value = sym->sd_sym->st_value; 740 moved = 1; 741 } else { 742 value = _elf_getxoff( 743 sdp->sd_isc->is_indata); 744 if (sdp->sd_isc->is_shdr->sh_flags & 745 SHF_ALLOC) 746 value += sdp->sd_isc-> 747 is_osdesc->os_shdr->sh_addr; 748 } 749 if (sdp->sd_isc->is_shdr->sh_flags & SHF_TLS) 750 value -= ofl->ofl_tlsphdr->p_vaddr; 751 } else { 752 /* 753 * Else the value is the symbols value. 754 */ 755 value = sdp->sd_sym->st_value; 756 } 757 758 /* 759 * Relocation against the GLOBAL_OFFSET_TABLE. 760 */ 761 if (arsp->rel_flags & FLG_REL_GOT) 762 arsp->rel_osdesc = ofl->ofl_osgot; 763 764 /* 765 * If loadable and not producing a relocatable object 766 * add the sections virtual address to the reference 767 * address. 768 */ 769 if ((arsp->rel_flags & FLG_REL_LOAD) && 770 ((flags & FLG_OF_RELOBJ) == 0)) 771 refaddr += arsp->rel_isdesc->is_osdesc-> 772 os_shdr->sh_addr; 773 774 /* 775 * If this entry has a PLT assigned to it, it's 776 * value is actually the address of the PLT (and 777 * not the address of the function). 778 */ 779 if (IS_PLT(arsp->rel_rtype)) { 780 if (sdp->sd_aux && sdp->sd_aux->sa_PLTndx) 781 value = ld_calc_plt_addr(sdp, ofl); 782 } 783 784 /* 785 * Determine whether the value needs further adjustment. 786 * Filter through the attributes of the relocation to 787 * determine what adjustment is required. Note, many 788 * of the following cases are only applicable when a 789 * .got is present. As a .got is not generated when a 790 * relocatable object is being built, any adjustments 791 * that require a .got need to be skipped. 792 */ 793 if ((arsp->rel_flags & FLG_REL_GOT) && 794 ((flags & FLG_OF_RELOBJ) == 0)) { 795 Xword R1addr; 796 uintptr_t R2addr; 797 Word gotndx; 798 Gotndx *gnp; 799 800 /* 801 * Perform relocation against GOT table. Since 802 * this doesn't fit exactly into a relocation 803 * we place the appropriate byte in the GOT 804 * directly 805 * 806 * Calculate offset into GOT at which to apply 807 * the relocation. 808 */ 809 gnp = ld_find_gotndx(&(sdp->sd_GOTndxs), gref, 810 ofl, 0); 811 assert(gnp); 812 813 if (arsp->rel_rtype == R_386_TLS_DTPOFF32) 814 gotndx = gnp->gn_gotndx + 1; 815 else 816 gotndx = gnp->gn_gotndx; 817 818 R1addr = (Xword)(gotndx * M_GOT_ENTSIZE); 819 820 /* 821 * Add the GOTs data's offset. 822 */ 823 R2addr = R1addr + (uintptr_t) 824 arsp->rel_osdesc->os_outdata->d_buf; 825 826 DBG_CALL(Dbg_reloc_doact(ofl->ofl_lml, 827 ELF_DBG_LD, M_MACH, SHT_REL, 828 arsp->rel_rtype, R1addr, value, 829 arsp->rel_sname, arsp->rel_osdesc)); 830 831 /* 832 * And do it. 833 */ 834 *(Xword *)R2addr = value; 835 continue; 836 837 } else if (IS_GOT_BASED(arsp->rel_rtype) && 838 ((flags & FLG_OF_RELOBJ) == 0)) { 839 value -= ofl->ofl_osgot->os_shdr->sh_addr; 840 841 } else if (IS_GOT_PC(arsp->rel_rtype) && 842 ((flags & FLG_OF_RELOBJ) == 0)) { 843 value = 844 (Xword)(ofl->ofl_osgot->os_shdr->sh_addr) - 845 refaddr; 846 847 } else if ((IS_PC_RELATIVE(arsp->rel_rtype)) && 848 (((flags & FLG_OF_RELOBJ) == 0) || 849 (arsp->rel_osdesc == sdp->sd_isc->is_osdesc))) { 850 value -= refaddr; 851 852 } else if (IS_TLS_INS(arsp->rel_rtype) && 853 IS_GOT_RELATIVE(arsp->rel_rtype) && 854 ((flags & FLG_OF_RELOBJ) == 0)) { 855 Gotndx *gnp; 856 857 gnp = ld_find_gotndx(&(sdp->sd_GOTndxs), gref, 858 ofl, 0); 859 assert(gnp); 860 value = (Xword)gnp->gn_gotndx * M_GOT_ENTSIZE; 861 if (arsp->rel_rtype == R_386_TLS_IE) { 862 value += 863 ofl->ofl_osgot->os_shdr->sh_addr; 864 } 865 866 } else if (IS_GOT_RELATIVE(arsp->rel_rtype) && 867 ((flags & FLG_OF_RELOBJ) == 0)) { 868 Gotndx *gnp; 869 870 gnp = ld_find_gotndx(&(sdp->sd_GOTndxs), 871 GOT_REF_GENERIC, ofl, 0); 872 assert(gnp); 873 value = (Xword)gnp->gn_gotndx * M_GOT_ENTSIZE; 874 875 } else if ((arsp->rel_flags & FLG_REL_STLS) && 876 ((flags & FLG_OF_RELOBJ) == 0)) { 877 Xword tlsstatsize; 878 879 /* 880 * This is the LE TLS reference model. Static 881 * offset is hard-coded. 882 */ 883 tlsstatsize = 884 S_ROUND(ofl->ofl_tlsphdr->p_memsz, 885 M_TLSSTATALIGN); 886 value = tlsstatsize - value; 887 888 /* 889 * Since this code is fixed up, it assumes a 890 * negative offset that can be added to the 891 * thread pointer. 892 */ 893 if ((arsp->rel_rtype == R_386_TLS_LDO_32) || 894 (arsp->rel_rtype == R_386_TLS_LE)) 895 value = -value; 896 } 897 898 if (arsp->rel_isdesc->is_file) 899 ifl_name = arsp->rel_isdesc->is_file->ifl_name; 900 else 901 ifl_name = MSG_INTL(MSG_STR_NULL); 902 903 /* 904 * Make sure we have data to relocate. Compiler and 905 * assembler developers have been known to generate 906 * relocations against invalid sections (normally .bss), 907 * so for their benefit give them sufficient information 908 * to help analyze the problem. End users should never 909 * see this. 910 */ 911 if (arsp->rel_isdesc->is_indata->d_buf == 0) { 912 eprintf(ofl->ofl_lml, ERR_FATAL, 913 MSG_INTL(MSG_REL_EMPTYSEC), 914 conv_reloc_386_type(arsp->rel_rtype, 0), 915 ifl_name, demangle(arsp->rel_sname), 916 arsp->rel_isdesc->is_name); 917 return (S_ERROR); 918 } 919 920 /* 921 * Get the address of the data item we need to modify. 922 */ 923 addr = (uchar_t *)((uintptr_t)arsp->rel_roffset + 924 (uintptr_t)_elf_getxoff(arsp->rel_isdesc-> 925 is_indata)); 926 927 DBG_CALL(Dbg_reloc_doact(ofl->ofl_lml, ELF_DBG_LD, 928 M_MACH, SHT_REL, arsp->rel_rtype, EC_NATPTR(addr), 929 value, arsp->rel_sname, arsp->rel_osdesc)); 930 addr += (uintptr_t)arsp->rel_osdesc->os_outdata->d_buf; 931 932 if ((((uintptr_t)addr - (uintptr_t)ofl->ofl_nehdr) > 933 ofl->ofl_size) || (arsp->rel_roffset > 934 arsp->rel_osdesc->os_shdr->sh_size)) { 935 int class; 936 937 if (((uintptr_t)addr - 938 (uintptr_t)ofl->ofl_nehdr) > ofl->ofl_size) 939 class = ERR_FATAL; 940 else 941 class = ERR_WARNING; 942 943 eprintf(ofl->ofl_lml, class, 944 MSG_INTL(MSG_REL_INVALOFFSET), 945 conv_reloc_386_type(arsp->rel_rtype, 0), 946 ifl_name, arsp->rel_isdesc->is_name, 947 demangle(arsp->rel_sname), 948 EC_ADDR((uintptr_t)addr - 949 (uintptr_t)ofl->ofl_nehdr)); 950 951 if (class == ERR_FATAL) { 952 return_code = S_ERROR; 953 continue; 954 } 955 } 956 957 /* 958 * The relocation is additive. Ignore the previous 959 * symbol value if this local partial symbol is 960 * expanded. 961 */ 962 if (moved) 963 value -= *addr; 964 965 /* 966 * If '-z noreloc' is specified - skip the do_reloc 967 * stage. 968 */ 969 if ((flags & FLG_OF_RELOBJ) || 970 !(dtflags1 & DF_1_NORELOC)) { 971 if (do_reloc((uchar_t)arsp->rel_rtype, addr, 972 &value, arsp->rel_sname, ifl_name, 973 ofl->ofl_lml) == 0) 974 return_code = S_ERROR; 975 } 976 } 977 } 978 return (return_code); 979 } 980 981 /* 982 * Add an output relocation record. 983 */ 984 uintptr_t 985 ld_add_outrel(Word flags, Rel_desc *rsp, Ofl_desc *ofl) 986 { 987 Rel_desc *orsp; 988 Rel_cache *rcp; 989 Sym_desc *sdp = rsp->rel_sym; 990 991 /* 992 * Static executables *do not* want any relocations against them. 993 * Since our engine still creates relocations against a WEAK UNDEFINED 994 * symbol in a static executable, it's best to disable them here 995 * instead of through out the relocation code. 996 */ 997 if ((ofl->ofl_flags & (FLG_OF_STATIC | FLG_OF_EXEC)) == 998 (FLG_OF_STATIC | FLG_OF_EXEC)) 999 return (1); 1000 1001 /* 1002 * If no relocation cache structures are available allocate 1003 * a new one and link it into the cache list. 1004 */ 1005 if ((ofl->ofl_outrels.tail == 0) || 1006 ((rcp = (Rel_cache *)ofl->ofl_outrels.tail->data) == 0) || 1007 ((orsp = rcp->rc_free) == rcp->rc_end)) { 1008 static size_t nextsize = 0; 1009 size_t size; 1010 1011 /* 1012 * Output relocation numbers can vary considerably between 1013 * building executables or shared objects (pic vs. non-pic), 1014 * etc. But, they typically aren't very large, so for these 1015 * objects use a standard bucket size. For building relocatable 1016 * objects, typically there will be an output relocation for 1017 * every input relocation. 1018 */ 1019 if (nextsize == 0) { 1020 if (ofl->ofl_flags & FLG_OF_RELOBJ) { 1021 if ((size = ofl->ofl_relocincnt) == 0) 1022 size = REL_LOIDESCNO; 1023 if (size > REL_HOIDESCNO) 1024 nextsize = REL_HOIDESCNO; 1025 else 1026 nextsize = REL_LOIDESCNO; 1027 } else 1028 nextsize = size = REL_HOIDESCNO; 1029 } else 1030 size = nextsize; 1031 1032 size = size * sizeof (Rel_desc); 1033 1034 if (((rcp = libld_malloc(sizeof (Rel_cache) + size)) == 0) || 1035 (list_appendc(&ofl->ofl_outrels, rcp) == 0)) 1036 return (S_ERROR); 1037 1038 /* LINTED */ 1039 rcp->rc_free = orsp = (Rel_desc *)(rcp + 1); 1040 /* LINTED */ 1041 rcp->rc_end = (Rel_desc *)((char *)rcp->rc_free + size); 1042 } 1043 1044 /* 1045 * If we are adding a output relocation against a section 1046 * symbol (non-RELATIVE) then mark that section. These sections 1047 * will be added to the .dynsym symbol table. 1048 */ 1049 if (sdp && (rsp->rel_rtype != M_R_RELATIVE) && 1050 ((flags & FLG_REL_SCNNDX) || 1051 (ELF_ST_TYPE(sdp->sd_sym->st_info) == STT_SECTION))) { 1052 1053 /* 1054 * If this is a COMMON symbol - no output section 1055 * exists yet - (it's created as part of sym_validate()). 1056 * So - we mark here that when it's created it should 1057 * be tagged with the FLG_OS_OUTREL flag. 1058 */ 1059 if ((sdp->sd_flags & FLG_SY_SPECSEC) && 1060 (sdp->sd_sym->st_shndx == SHN_COMMON)) { 1061 if (ELF_ST_TYPE(sdp->sd_sym->st_info) != STT_TLS) 1062 ofl->ofl_flags1 |= FLG_OF1_BSSOREL; 1063 else 1064 ofl->ofl_flags1 |= FLG_OF1_TLSOREL; 1065 } else { 1066 Os_desc *osp = sdp->sd_isc->is_osdesc; 1067 1068 if (osp && ((osp->os_flags & FLG_OS_OUTREL) == 0)) { 1069 ofl->ofl_dynshdrcnt++; 1070 osp->os_flags |= FLG_OS_OUTREL; 1071 } 1072 } 1073 } 1074 1075 *orsp = *rsp; 1076 orsp->rel_flags |= flags; 1077 1078 rcp->rc_free++; 1079 ofl->ofl_outrelscnt++; 1080 1081 if (flags & FLG_REL_GOT) 1082 ofl->ofl_relocgotsz += (Xword)sizeof (Rel); 1083 else if (flags & FLG_REL_PLT) 1084 ofl->ofl_relocpltsz += (Xword)sizeof (Rel); 1085 else if (flags & FLG_REL_BSS) 1086 ofl->ofl_relocbsssz += (Xword)sizeof (Rel); 1087 else if (flags & FLG_REL_NOINFO) 1088 ofl->ofl_relocrelsz += (Xword)sizeof (Rel); 1089 else 1090 orsp->rel_osdesc->os_szoutrels += (Xword)sizeof (Rel); 1091 1092 if (orsp->rel_rtype == M_R_RELATIVE) 1093 ofl->ofl_relocrelcnt++; 1094 1095 /* 1096 * We don't perform sorting on PLT relocations because 1097 * they have already been assigned a PLT index and if we 1098 * were to sort them we would have to re-assign the plt indexes. 1099 */ 1100 if (!(flags & FLG_REL_PLT)) 1101 ofl->ofl_reloccnt++; 1102 1103 /* 1104 * Insure a GLOBAL_OFFSET_TABLE is generated if required. 1105 */ 1106 if (IS_GOT_REQUIRED(orsp->rel_rtype)) 1107 ofl->ofl_flags |= FLG_OF_BLDGOT; 1108 1109 /* 1110 * Identify and possibly warn of a displacement relocation. 1111 */ 1112 if (orsp->rel_flags & FLG_REL_DISP) { 1113 ofl->ofl_dtflags_1 |= DF_1_DISPRELPND; 1114 1115 if (ofl->ofl_flags & FLG_OF_VERBOSE) 1116 ld_disp_errmsg(MSG_INTL(MSG_REL_DISPREL4), orsp, ofl); 1117 } 1118 DBG_CALL(Dbg_reloc_ors_entry(ofl->ofl_lml, ELF_DBG_LD, SHT_REL, 1119 M_MACH, orsp)); 1120 return (1); 1121 } 1122 1123 /* 1124 * Stub routine since register symbols are not supported on i386. 1125 */ 1126 /* ARGSUSED */ 1127 uintptr_t 1128 ld_reloc_register(Rel_desc * rsp, Is_desc * isp, Ofl_desc * ofl) 1129 { 1130 eprintf(ofl->ofl_lml, ERR_FATAL, MSG_INTL(MSG_REL_NOREG)); 1131 return (S_ERROR); 1132 } 1133 1134 /* 1135 * process relocation for a LOCAL symbol 1136 */ 1137 uintptr_t 1138 ld_reloc_local(Rel_desc * rsp, Ofl_desc * ofl) 1139 { 1140 Word flags = ofl->ofl_flags; 1141 Sym_desc *sdp = rsp->rel_sym; 1142 Word shndx = sdp->sd_sym->st_shndx; 1143 1144 /* 1145 * if ((shared object) and (not pc relative relocation) and 1146 * (not against ABS symbol)) 1147 * then 1148 * build R_386_RELATIVE 1149 * fi 1150 */ 1151 if ((flags & FLG_OF_SHAROBJ) && (rsp->rel_flags & FLG_REL_LOAD) && 1152 !(IS_PC_RELATIVE(rsp->rel_rtype)) && 1153 !(IS_GOT_BASED(rsp->rel_rtype)) && 1154 !(rsp->rel_isdesc != NULL && 1155 (rsp->rel_isdesc->is_shdr->sh_type == SHT_SUNW_dof)) && 1156 (((sdp->sd_flags & FLG_SY_SPECSEC) == 0) || 1157 (shndx != SHN_ABS) || (sdp->sd_aux && sdp->sd_aux->sa_symspec))) { 1158 Word ortype = rsp->rel_rtype; 1159 1160 rsp->rel_rtype = R_386_RELATIVE; 1161 if (ld_add_outrel(NULL, rsp, ofl) == S_ERROR) 1162 return (S_ERROR); 1163 rsp->rel_rtype = ortype; 1164 } 1165 1166 /* 1167 * If the relocation is against a 'non-allocatable' section 1168 * and we can not resolve it now - then give a warning 1169 * message. 1170 * 1171 * We can not resolve the symbol if either: 1172 * a) it's undefined 1173 * b) it's defined in a shared library and a 1174 * COPY relocation hasn't moved it to the executable 1175 * 1176 * Note: because we process all of the relocations against the 1177 * text segment before any others - we know whether 1178 * or not a copy relocation will be generated before 1179 * we get here (see reloc_init()->reloc_segments()). 1180 */ 1181 if (!(rsp->rel_flags & FLG_REL_LOAD) && 1182 ((shndx == SHN_UNDEF) || 1183 ((sdp->sd_ref == REF_DYN_NEED) && 1184 ((sdp->sd_flags & FLG_SY_MVTOCOMM) == 0)))) { 1185 /* 1186 * If the relocation is against a SHT_SUNW_ANNOTATE 1187 * section - then silently ignore that the relocation 1188 * can not be resolved. 1189 */ 1190 if (rsp->rel_osdesc && 1191 (rsp->rel_osdesc->os_shdr->sh_type == SHT_SUNW_ANNOTATE)) 1192 return (0); 1193 eprintf(ofl->ofl_lml, ERR_WARNING, MSG_INTL(MSG_REL_EXTERNSYM), 1194 conv_reloc_386_type(rsp->rel_rtype, 0), 1195 rsp->rel_isdesc->is_file->ifl_name, 1196 demangle(rsp->rel_sname), rsp->rel_osdesc->os_name); 1197 return (1); 1198 } 1199 1200 /* 1201 * Perform relocation. 1202 */ 1203 return (ld_add_actrel(NULL, rsp, ofl)); 1204 } 1205 1206 uintptr_t 1207 /* ARGSUSED */ 1208 ld_reloc_GOTOP(Boolean local, Rel_desc * rsp, Ofl_desc * ofl) 1209 { 1210 /* 1211 * Stub routine for common code compatibility, we shouldn't 1212 * actually get here on x86. 1213 */ 1214 assert(0); 1215 return (S_ERROR); 1216 } 1217 1218 uintptr_t 1219 ld_reloc_TLS(Boolean local, Rel_desc * rsp, Ofl_desc * ofl) 1220 { 1221 Word rtype = rsp->rel_rtype; 1222 Sym_desc *sdp = rsp->rel_sym; 1223 Word flags = ofl->ofl_flags; 1224 Gotndx *gnp; 1225 1226 /* 1227 * If we're building an executable - use either the IE or LE access 1228 * model. If we're building a shared object process any IE model. 1229 */ 1230 if ((flags & FLG_OF_EXEC) || (IS_TLS_IE(rtype))) { 1231 /* 1232 * Set the DF_STATIC_TLS flag. 1233 */ 1234 ofl->ofl_dtflags |= DF_STATIC_TLS; 1235 1236 if (!local || ((flags & FLG_OF_EXEC) == 0)) { 1237 /* 1238 * Assign a GOT entry for static TLS references. 1239 */ 1240 if ((gnp = ld_find_gotndx(&(sdp->sd_GOTndxs), 1241 GOT_REF_TLSIE, ofl, 0)) == 0) { 1242 1243 if (ld_assign_got_TLS(local, rsp, ofl, sdp, 1244 gnp, GOT_REF_TLSIE, FLG_REL_STLS, 1245 rtype, R_386_TLS_TPOFF, 0) == S_ERROR) 1246 return (S_ERROR); 1247 } 1248 1249 /* 1250 * IE access model. 1251 */ 1252 if (IS_TLS_IE(rtype)) { 1253 if (ld_add_actrel(FLG_REL_STLS, 1254 rsp, ofl) == S_ERROR) 1255 return (S_ERROR); 1256 1257 /* 1258 * A non-pic shared object needs to adjust the 1259 * active relocation (indntpoff). 1260 */ 1261 if (((flags & FLG_OF_EXEC) == 0) && 1262 (rtype == R_386_TLS_IE)) { 1263 rsp->rel_rtype = R_386_RELATIVE; 1264 return (ld_add_outrel(NULL, rsp, ofl)); 1265 } 1266 return (1); 1267 } 1268 1269 /* 1270 * Fixups are required for other executable models. 1271 */ 1272 return (ld_add_actrel((FLG_REL_TLSFIX | FLG_REL_STLS), 1273 rsp, ofl)); 1274 } 1275 1276 /* 1277 * LE access model. 1278 */ 1279 if (IS_TLS_LE(rtype) || (rtype == R_386_TLS_LDO_32)) 1280 return (ld_add_actrel(FLG_REL_STLS, rsp, ofl)); 1281 1282 return (ld_add_actrel((FLG_REL_TLSFIX | FLG_REL_STLS), 1283 rsp, ofl)); 1284 } 1285 1286 /* 1287 * Building a shared object. 1288 * 1289 * Assign a GOT entry for a dynamic TLS reference. 1290 */ 1291 if (IS_TLS_LD(rtype) && ((gnp = ld_find_gotndx(&(sdp->sd_GOTndxs), 1292 GOT_REF_TLSLD, ofl, 0)) == 0)) { 1293 1294 if (ld_assign_got_TLS(local, rsp, ofl, sdp, gnp, GOT_REF_TLSLD, 1295 FLG_REL_MTLS, rtype, R_386_TLS_DTPMOD32, 0) == S_ERROR) 1296 return (S_ERROR); 1297 1298 } else if (IS_TLS_GD(rtype) && 1299 ((gnp = ld_find_gotndx(&(sdp->sd_GOTndxs), GOT_REF_TLSGD, 1300 ofl, 0)) == 0)) { 1301 1302 if (ld_assign_got_TLS(local, rsp, ofl, sdp, gnp, GOT_REF_TLSGD, 1303 FLG_REL_DTLS, rtype, R_386_TLS_DTPMOD32, 1304 R_386_TLS_DTPOFF32) == S_ERROR) 1305 return (S_ERROR); 1306 } 1307 1308 /* 1309 * For GD/LD TLS reference - TLS_{GD,LD}_CALL, this will eventually 1310 * cause a call to __tls_get_addr(). Convert this relocation to that 1311 * symbol now, and prepare for the PLT magic. 1312 */ 1313 if ((rtype == R_386_TLS_GD_PLT) || (rtype == R_386_TLS_LDM_PLT)) { 1314 Sym_desc * tlsgetsym; 1315 1316 if ((tlsgetsym = ld_sym_add_u(MSG_ORIG(MSG_SYM_TLSGETADDR_UU), 1317 ofl)) == (Sym_desc *)S_ERROR) 1318 return (S_ERROR); 1319 1320 rsp->rel_sym = tlsgetsym; 1321 rsp->rel_sname = tlsgetsym->sd_name; 1322 rsp->rel_rtype = R_386_PLT32; 1323 1324 if (ld_reloc_plt(rsp, ofl) == S_ERROR) 1325 return (S_ERROR); 1326 1327 rsp->rel_sym = sdp; 1328 rsp->rel_sname = sdp->sd_name; 1329 rsp->rel_rtype = rtype; 1330 return (1); 1331 } 1332 1333 if (IS_TLS_LD(rtype)) 1334 return (ld_add_actrel(FLG_REL_MTLS, rsp, ofl)); 1335 1336 return (ld_add_actrel(FLG_REL_DTLS, rsp, ofl)); 1337 } 1338 1339 /* ARGSUSED3 */ 1340 Gotndx * 1341 ld_find_gotndx(List * lst, Gotref gref, Ofl_desc * ofl, Rel_desc * rdesc) 1342 { 1343 Listnode * lnp; 1344 Gotndx * gnp; 1345 1346 if ((gref == GOT_REF_TLSLD) && ofl->ofl_tlsldgotndx) 1347 return (ofl->ofl_tlsldgotndx); 1348 1349 for (LIST_TRAVERSE(lst, lnp, gnp)) { 1350 if (gnp->gn_gotref == gref) 1351 return (gnp); 1352 } 1353 return ((Gotndx *)0); 1354 } 1355 1356 Xword 1357 ld_calc_got_offset(Rel_desc * rdesc, Ofl_desc * ofl) 1358 { 1359 Os_desc *osp = ofl->ofl_osgot; 1360 Sym_desc *sdp = rdesc->rel_sym; 1361 Xword gotndx; 1362 Gotref gref; 1363 Gotndx *gnp; 1364 1365 if (rdesc->rel_flags & FLG_REL_DTLS) 1366 gref = GOT_REF_TLSGD; 1367 else if (rdesc->rel_flags & FLG_REL_MTLS) 1368 gref = GOT_REF_TLSLD; 1369 else if (rdesc->rel_flags & FLG_REL_STLS) 1370 gref = GOT_REF_TLSIE; 1371 else 1372 gref = GOT_REF_GENERIC; 1373 1374 gnp = ld_find_gotndx(&(sdp->sd_GOTndxs), gref, ofl, 0); 1375 assert(gnp); 1376 1377 gotndx = (Xword)gnp->gn_gotndx; 1378 1379 if ((rdesc->rel_flags & FLG_REL_DTLS) && 1380 (rdesc->rel_rtype == R_386_TLS_DTPOFF32)) 1381 gotndx++; 1382 1383 return ((Xword)(osp->os_shdr->sh_addr + (gotndx * M_GOT_ENTSIZE))); 1384 } 1385 1386 1387 /* ARGSUSED4 */ 1388 uintptr_t 1389 ld_assign_got_ndx(List * lst, Gotndx * pgnp, Gotref gref, Ofl_desc * ofl, 1390 Rel_desc * rsp, Sym_desc * sdp) 1391 { 1392 Gotndx *gnp; 1393 uint_t gotents; 1394 1395 if (pgnp) 1396 return (1); 1397 1398 if ((gref == GOT_REF_TLSGD) || (gref == GOT_REF_TLSLD)) 1399 gotents = 2; 1400 else 1401 gotents = 1; 1402 1403 if ((gnp = libld_calloc(sizeof (Gotndx), 1)) == 0) 1404 return (S_ERROR); 1405 gnp->gn_gotndx = ofl->ofl_gotcnt; 1406 gnp->gn_gotref = gref; 1407 1408 ofl->ofl_gotcnt += gotents; 1409 1410 if (gref == GOT_REF_TLSLD) { 1411 ofl->ofl_tlsldgotndx = gnp; 1412 return (1); 1413 } 1414 1415 if (list_appendc(lst, (void *)gnp) == 0) 1416 return (S_ERROR); 1417 1418 return (1); 1419 } 1420 1421 void 1422 ld_assign_plt_ndx(Sym_desc * sdp, Ofl_desc *ofl) 1423 { 1424 sdp->sd_aux->sa_PLTndx = 1 + ofl->ofl_pltcnt++; 1425 sdp->sd_aux->sa_PLTGOTndx = ofl->ofl_gotcnt++; 1426 ofl->ofl_flags |= FLG_OF_BLDGOT; 1427 } 1428 1429 /* 1430 * Initializes .got[0] with the _DYNAMIC symbol value. 1431 */ 1432 uintptr_t 1433 ld_fillin_gotplt(Ofl_desc *ofl) 1434 { 1435 Word flags = ofl->ofl_flags; 1436 1437 if (ofl->ofl_osgot) { 1438 Sym_desc *sdp; 1439 1440 if ((sdp = ld_sym_find(MSG_ORIG(MSG_SYM_DYNAMIC_U), 1441 SYM_NOHASH, 0, ofl)) != NULL) { 1442 uchar_t *genptr; 1443 1444 genptr = ((uchar_t *)ofl->ofl_osgot->os_outdata->d_buf + 1445 (M_GOT_XDYNAMIC * M_GOT_ENTSIZE)); 1446 /* LINTED */ 1447 *(Word *)genptr = (Word)sdp->sd_sym->st_value; 1448 } 1449 } 1450 1451 /* 1452 * Fill in the reserved slot in the procedure linkage table the first 1453 * entry is: 1454 * if (building a.out) { 1455 * PUSHL got[1] # the address of the link map entry 1456 * JMP * got[2] # the address of rtbinder 1457 * } else { 1458 * PUSHL got[1]@GOT(%ebx) # the address of the link map entry 1459 * JMP * got[2]@GOT(%ebx) # the address of rtbinder 1460 * } 1461 */ 1462 if ((flags & FLG_OF_DYNAMIC) && ofl->ofl_osplt) { 1463 uchar_t *pltent; 1464 1465 pltent = (uchar_t *)ofl->ofl_osplt->os_outdata->d_buf; 1466 if (!(flags & FLG_OF_SHAROBJ)) { 1467 pltent[0] = M_SPECIAL_INST; 1468 pltent[1] = M_PUSHL_DISP; 1469 pltent += 2; 1470 /* LINTED */ 1471 *(Word *)pltent = (Word)(ofl->ofl_osgot->os_shdr-> 1472 sh_addr + M_GOT_XLINKMAP * M_GOT_ENTSIZE); 1473 pltent += 4; 1474 pltent[0] = M_SPECIAL_INST; 1475 pltent[1] = M_JMP_DISP_IND; 1476 pltent += 2; 1477 /* LINTED */ 1478 *(Word *)pltent = (Word)(ofl->ofl_osgot->os_shdr-> 1479 sh_addr + M_GOT_XRTLD * M_GOT_ENTSIZE); 1480 } else { 1481 pltent[0] = M_SPECIAL_INST; 1482 pltent[1] = M_PUSHL_REG_DISP; 1483 pltent += 2; 1484 /* LINTED */ 1485 *(Word *)pltent = (Word)(M_GOT_XLINKMAP * 1486 M_GOT_ENTSIZE); 1487 pltent += 4; 1488 pltent[0] = M_SPECIAL_INST; 1489 pltent[1] = M_JMP_REG_DISP_IND; 1490 pltent += 2; 1491 /* LINTED */ 1492 *(Word *)pltent = (Word)(M_GOT_XRTLD * 1493 M_GOT_ENTSIZE); 1494 } 1495 } 1496 return (1); 1497 } 1498